VDB
BDU%3A2025-01988
BDU%3A2025-01988
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость функции populate() библиотеки Mongoose, позволяющая нарушителю выполнить произвольный код и получить доступ на чтение и изменение данных
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения | Mongoose |
Timeline
- Feb 24, 2025 CVE Published
References
- https://github.com/Automattic/mongoose/blob/master/CHANGELOG.md url
- https://github.com/Automattic/mongoose/commit/64a9f9706f2428c49e0cfb8e223065acc645f7bc url
- https://github.com/Automattic/mongoose/releases/tag/8.9.5 url
- https://www.npmjs.com/package/mongoose?activeTab=versions url
- https://github.com/advisories/GHSA-vg7j-7cwx-8wgw url
- https://github.com/Automattic/mongoose/releases/tag/7.8.4 advisory
- https://github.com/Automattic/mongoose/releases/tag/6.13.6 advisory